Ticket #21081: 21081.2.diff

wp-admin/includes/user.php

@@ -69 +69 @@
                         $user->user_url = '';
                 } else {
                         $user->user_url = esc_url_raw( $_POST['url'] );
-                        $user->user_url = preg_match('/^(https?|ftps?|mailto|news|irc|gopher|nntp|feed|telnet):/is', $user->user_url) ? $user->user_url : 'http://'.$user->user_url;
+                        $protocols = implode( '|', array_map( 'preg_quote', wp_allowed_protocols() ) );
+                        $user->user_url = preg_match('/^(' . $protocols . '):/is', $user->user_url) ? $user->user_url : 'http://'.$user->user_url;
                 }
         }
         if ( isset( $_POST['first_name'] ) )

wp-includes/functions.php

@@ -3508 +3508 @@
         static $protocols;
 
         if ( empty( $protocols ) ) {
-                $protocols = array( 'http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'gopher', 'nntp', 'feed', 'telnet', 'mms', 'rtsp', 'svn' );
+                $protocols = array( 'http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'gopher', 'nntp', 'feed', 'telnet', 'mms', 'rtsp', 'svn', 'tel', 'fax' );
                 $protocols = apply_filters( 'kses_allowed_protocols', $protocols );
         }